Free answers what it is.
Pro does the work.

On Free, binaries you upload join the public corpus — that's the deal that keeps Free free. On Pro and Enterprise, uploads land in a private team and never become public.

Free is the overview of a public Windows, Linux, or macOS binary on a common architecture: what it is, the verdict with the indicators that scored it, the behavioral profile and capability map, the SBOM with CVE counts, where it has been seen, corpus search, hash lookup, and a rate-limited API. Pro is the work below the overview: the function list, per-function decompilation, the call graph, full strings, binary and package diff, every format, all 66 architectures, firmware unpacking, full per-CVE detail, the cited read with IOC and ATT&CK export, a private team where every member is a seat, and the full MCP for agents.

Yes. The REST API and MCP lookup work on Free with rate limits — send a binary, get the overview back: verdict, capabilities, libraries, CVE counts. It's enough to evaluate an integration against the public corpus. Pro adds function inspection, the query DSL, JSONL export, team API keys, and the full MCP for pipelines and agents, on fair use pooled per seat.

Free opens the desktop platforms — Windows (PE), Linux (ELF), and macOS (Mach-O) — on the common architectures: x86, x86-64, ARM, and AArch64. That's enough to validate openbinary on most binaries. The full set (all 6 formats, all 66 architectures including the embedded and exotic chipsets) and firmware unpacking are Pro.

Yes. Switch the toggle to annual and Pro is two months free — $2,490 per seat per year instead of $2,988. Enterprise is quoted annually from the start.

No. A seat is a person who does the work — uploads, decompiles, annotates, runs agents. Showing someone what you found is a share link: it opens that one binary, read-only, at your team's plan, for anyone who holds it, for free, until you revoke it. If the binary can be public, an admin makes it public in one click and it joins the corpus for everyone.

Never. IDA Pro and Binary Ninja sell decompilers and architectures à la carte — a separate license per chipset. We don't. Free shows the overview of mainstream binaries so you can try it, and one flat Pro price per seat then unlocks every format, all 66 architectures, and firmware. No per-chipset add-ons, ever.

Never. Analysis is 100% static — no sandbox, no execution, no network required. It's air-gap safe by design.

Free and anonymous use is rate-limited to keep the public service healthy for everyone. Pro and Enterprise run on fair use pooled per seat — generous enough that real work never hits a wall (a 1,000-binary firmware is a single upload, not a thousand), and we warn before we ever throttle. Re-processing a package is the one deliberately tight action, since it re-runs the full analysis.

Any machine a collector reports from — a workstation, a server, or an unpacked firmware image. Fleet rolls every binary up to the hosts that run it, so a single CVE shows exactly how many hosts are impacted.

Self-hosting and on-prem deployment are an Enterprise feature — fleet collectors and the full stack run on your infrastructure. Pro and Free run on our hosted cloud.

Directly. The CRA requires a machine-readable SBOM and documented vulnerability handling for every product with digital elements sold in the EU — reporting obligations start September 11, 2026, and the full obligations apply from December 11, 2027. openbinary reads the shipped artifact itself: unpack the firmware, identify every component even in stripped binaries, attach CVEs, export the SBOM, and diff it release over release. Talk to sales for a CRA readiness report on your firmware.